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Top Stories 

• A Mid- Valley Pipeline Co. pipeline leaked March 18, spilling 10,000 gallons of crude oil 
in Colerain Township, Ohio, affecting a mile of intermittent stream and pooling in a 
wetland in the Oak Glen Nature Preserve. - Cincinnati Enquirer (See item 1) 

• General Motors announced recalls for several vehicle models for various issues, covering a 
total of around 1.5 million vehicles. - CNNMoney (See item 3 ) 

• Cosmetics and beauty retailer Sally Beauty confirmed March 17 that attackers breached the 
company’s networks and stole credit card data for less than 25,000 records as estimated by 
the company. - Krebs on Security (See item 5 ) 

• Security researchers identified a cybercrime operation dubbed Windigo that has infected 
around 25,000 UNIX servers over the past 2 years and uses them to send around 35 million 
spam emails daily. - Softpedia (See item 25 ) 
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Energy Sector 



1. March 18, Cincinnati Enquirer - (Ohio) Water works: Crude oil leak not a threat to 
drinking water. A Mid-Valley Pipeline Co. pipeline operated by Sunoco Logistics 
leaked, spilling 10,000 gallons of crude oil in Colerain Township, affecting a mile of 
intermittent stream and pooling in a wetland in the Oak Glen Nature Preserve, officials 
confirmed March 18. 

Source: http://www.cincinnati.com/story/news/local/2014/03/18/crews-investigate- 
colerain-gas-leak/6554741/ 

2. March 17, Associated Press - (Minnesota) Fergus Falls ethanol plant resumes 
production after dryer fire. Green Plains Otter Tail, a subsidiary of Green Plains 
Renewable Energy Inc., resumed operations at its Fergus Falls ethanol plant after 
shutting down March 10 due to a fire in the plant’s dryer system. The plant will 
produce a byproduct of ethanol production that is sold as livestock feed until the dryer 
system can be repaired. 

Source: http : //w w w. startribune . com/local/25067 4781 .html 

[ Return to top ] 

Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

3. March 18, CNNMoney - (National) GM recalls another 1.5 million vehicles. General 
Motors announced recalls for several vehicle models for various issues, covering a total 
of around 1.5 million vehicles. Model year 2008-2013 Buick Enclave and GMC 
Acadia, model year 2009-2013 Chevrolet Traverse, and 2008-2010 Saturn Outlook 
vehicles made up of the bulk of the recall, while Cadillac XTS, Chevrolet Express, and 
GMC Savana vehicles were also recalled. 

Source: http : //money . cnn . com/20 1 4/03/ 1 7/auto s/gm-recall/ 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

4. March 18, Softpedia - (International) Two Ukrainians and one American charged 
for role in global cybercrime operation. Two Ukrainians and one American were 
charged by federal authorities with hacking into the systems of several U.S. banks, 
government agencies, payroll processing companies, and brokerage firms in an attempt 
to steal at least $15 million between 2012 and 2013. 

Source: http://news.softpedia.com/news/Two-Ukrainians-and-One-American-Charged- 
for-Role-in-Global-Cybercrime-Operation-432716.shtml 

5. March 17, Krebs on Security - (International) Sally Beauty confirms card data 
breach. Cosmetics and beauty retailer Sally Beauty confirmed March 17 that attackers 
breached the company’s networks and stole credit card data for less than 25,000 
records as estimated by the company. The breach is still under investigation. 

Source: http://krebsonsecuritv.com/2014/03/sallv-beauty-confirms-card-data-breach/ 

6. March 17, WMAQ 5 Chicago - (Illinois) Former CME clerk convicted of 
commodities fraud. A former trader at the Chicago Mercantile Exchange was found 
guilty March 14 of secretly adding her own order tickets when submitting tickets for 
public customers and entering favorable prices on lean hogs futures trades between 
2009 and 2010, making $213,680 via the fraudulent trade cards. 

Source: http://www.nbcchicago.com/news/local/Chicago-Mercantile-Exchange-trader- 
clerk-nicole-graziano-25065387 1 .html 

7. March 17, Help Net Security - (International) Mt. Gox CEO doxing was a ploy to 
spread Bitcoin-stealing malware. A researcher at Kaspersky Lab reported that an 
archive file purporting to contain financial and personal information relating to the Mt. 
Gox Bitcoin service also contains a Windows and a Mac trojan designed to steal users 
Bitcoin virtual currency. 

Source: http://www.net-securitv.org/malware news.php?id=2733 
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Transportation Systems Sector 

8. March 18, Richmond Times-Dispatch - (Virginia) Icy conditions cause hundreds of 
crashes in area. Winter weather in Virginia caused State Police to respond to about 
745 wrecks between March 17-18 on various roads and highways throughout the State. 
Source: http://www.timesdispatch.com/news/latest-news/icy-conditions-cause- 
hundreds-of-crashes-m-area/article 5dba6cH)-ae37-l le3-b2()f-0() 17a43b2370.html 

9. March 18, WWSB 40 Sarasota - (Florida) Northbound lanes of 1-75 back open 
following early morning accident. Northbound lanes of Interstate 75 in Manatee 
County were closed for 6 hours after a semi-truck hit a guardrail and concrete barrier, 
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then overturned, blocking lanes March 18. 

Source: http://www.mysuncoast.com/news/northbound-lanes-of-i-back-open- 
following-early-moming-accident/article 5bfd5flc-ae97-l le3-907c- 



0017a43b2370.html 



10. March 17, Berkeleyside.com - (California) Person hit, killed by freight train on 
tracks in Berkeley. Authorities are investigating the death of a man hit by a Union 
Pacific freight train March 17 on the tracks near the Berkeley- Albany border which 
halted rail traffic for roughly 4 hours before resuming service. 

Source: http://www.berkelevside.com/2014/03/17/breaking-person-hit-killed-by- 
freight-train-in-berkeley/ 

11. March 17, KGTV 10 San Diego - (California) SUV plunges down embankment, 
lands on car on southbound Interstate 805. One southbound lane on Interstate 805 in 
San Diego was closed for several hours March 17 after a vehicle crashed down an 
embankment onto the interstate and landed on a car. Two people were injured and 
transported to an area hospital. 

Source: http://www.10news.com/news/suv-lands-on-i-805-upside-down-sigalert- 
issued-031714 

12. March 17, KGBT 4 Harlingen - (Texas) Highway 281 closed due to emergency 
repairs after accident. Highway 281 in the City of Pharr was shut down for 2 hours 
for emergency repairs March 17 after an accident involving a semi-truck and five cars. 
Source: http://www.valleycentral.com/news/story.aspx?id=1020112 
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Food and Agriculture Sector 

13. March 17, Brainerd Daily Dispatch - (Minnesota) Fire damages Thielen Meats 
smokehouse and part of building. A fire damaged two smokehouses and a portion of 
the main building at Thielen Meats of Pierz meat market in Minnesota March 14. The 
cause of the fire is under investigation and officials stated repairs could take up to 2 
months. 

Source: http://brainerddispatch.com/news/2014-03-17/fire-damages-thielen-meats- 
smokehouse-and-part-building 

14. March 17, WGRZ 2 Buffalo - (New York) No injuries after ammonia leak at Coca- 
Cola plant. HAZMAT crews responded to a Coca-Cola plant in the Town of 
Tonawanda, New York, March 17 after a valve on an ammonia tank overheated and 
released the chemical into the plant. No one was injured, but employees were evacuated 
from the facility as a precaution. 

Source: http://www.wgrz.com/storv/news/local/tonawandas/2014/03/17/tonawanda- 
coca-cola-plant-ammonia-leak/6539281/ 

15. March 17, Food Safety News - (National) Organic basil sold at Trader Joe’s recalled 
due to potential Salmonella risk. Infinite Herbs LLC of Miami voluntarily recalled 
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2.5 ounce packages of its Infinite Herbs brand Organic Basil sold at Trader Joe’s stores 
in 7 States due to possible Salmonella contamination. 

Source: http://www.foodsafetvnews.com/2014/03/trader-ioes-organic-basil-recalled- 
due-to-potential-salmonella-risk 
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Water and Wastewater Systems Sector 

16. March 17, MLive.com - (Michigan) Firefighters respond to diesel fuel leak in 
Kalamazoo River; spill apparently caused by ‘criminal act.’ Diesel fuel spilled for 
more than 3 hours March 17 from an above ground tank at Klooster’s Greenhouse in 
Comstock Township and into the Kalamazoo River. Authorities are investigating the 
apparent criminal act and measuring the exact amount of fuel that spilled after securing 
the leak. 

Source: http://www.mlive.com/news/kalamazoo/index.ssf/2014/03/firefighters respond t 
o diesel.html 



For another story, see item 1 
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Healthcare and Public Health Sector 

17. March 17, Associated Press - (Maryland) Md. nonprofit serving disabled reports 
data breach. Frederick, Maryland-based Service Coordination Inc., notified about 
9,700 clients March 14 after an individual hacked the computers of the provider and 
stole Social Security numbers and medical information. Authorities are continuing to 
investigate the breach. 

Source: http://www.miamiherald.com/2014/03/17/4000908/rnd-nonprofit-serving- 
disabled.html 
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Government Facilities Sector 

18. March 18, KWTX 10 Waco - (Texas) Classes canceled after fire guts Texas 
elementary school. A fire at Hamshire-Fannett Elementary School in Texas prompted 
officials to cancel classes throughout the entire district March 18. 

Source: http://www.kwtx.com/home/headlines/Classes-Canceled-After-Fire-Guts- 
Texas-Elementary-School-25078868 1 .html 

19. March 18, WWJ-TV 62 Detroit - (Michigan) Fire breaks out at University of 
Michigan sorority house. Authorities are investigating after 63 students were 
displaced when a March 1 8 fire damaged their sorority house near the University of 
Michigan campus in Ann Arbor. 

Source: http://detroit.cbslocal.com/2014/03/18/fire-breaks-out-at-university-of- 
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michigan-sorority-house/ 



20. March 18, Macomb Daily - (Michigan) Macomb County courthouse reopens 
following bomb threat. The Macomb County Circuit courthouse in Mount Clemens 
was evacuated for 5 hours March 17 after several calls were made to the county clerk’s 
office claiming there was a bomb in the building. Police cleared the scene after nothing 
suspicious was found and continue to investigate the threats. 

Source: http://www.macombdaily.com/general-news/20140317/macomb-countv- 
courthouse-reopens-following-bomb-threat 

21. March 17, KRQE 13 Albuquerque - (New Mexico) Highway 508 Fire burns over 
8,000 acres. Firefighters reached 70 percent containment of the Highway 508 Fire that 
burned through 8,000 acres in eastern New Mexico between Portales and Lovington. 
Source: http://krqe.com/2014/03/17/highwav-508-fire-burns-over-4000-acres/ 

22. March 17, WCVB 5 Boston - (Massachusetts) Douglas Municipal Center evacuated 
after CO scare. High carbon monoxide readings were detected after 1 8 people, 
including 16 children, were transported to area hospitals when the Douglas Municipal 
Center in Massachusetts was evacuated for about 2 hours March 17. A malfunctioning 
boiler caused the leak and the building was declared safe and reopened after authorities 
investigated. 

Source: http://www.wcvb.com/news/douglas-municipal-center-evacuated-after-co- 
leak/250 14770 

23. March 17, University of Wisconsin-Madison - (Wisconsin) UW-Madison, USDA 
enter into settlement agreement. The University of Wisconsin-Madison entered into a 
settlement agreement with the U.S. Department of Agriculture which resulted in a fine 
of $35,286 following an investigation that yielded seven citations related to the Animal 
Welfare Act and animal care and use at the campus. The university has since changed 
its policies and procedures. 

Source: http://news.wisc.edu/22644 

For another story, see item 4 
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Emergency Services Sector 

24. March 17, WPMT 43 York - (Pennsylvania) Roof collapse knocks Mifflin County 
fire station out of service. The Mifflin County volunteer fire station was forced to 
limit service indefinitely after a roof collapse at the Reedsville Fire Company in 
Pennsylvania March 17, which caused an estimated $700,000 to $1 million in damage 
to the building. 

Source: http://fox43.com/2014/03/17/roof-collapse-knocks-mifflin-countv-fire-station- 
out-of-service/ 
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Information Technology Sector 



25. March 18, Softpedia - (International) ESET uncovers server botnet that 
infected over 25,000 UNIX machines. Security researchers with ESET, CERT- 
13 und, and other organizations identified a cybercrime operation dubbed 
Windigo that has infected around 25,000 UNIX servers over the past 2 years. 

The infected servers are being used to send around 35 million spam emails 
daily. 

Source: http://news.softpedia.com/news/ESET-Uncovers-Server-Botnet-That- 
Infected-o ver-25 -000-UNIX-Machines-43 280 1 . shtml 

26. March 17, CNET News - (International) Outage hits Google Talk, Hangouts. Some 
users of Google’s Talk and Hangouts services experienced outages for around 3 hours 
March 17. 

Source: http://news.cnet.com/8301-1023 3-57620423-93/outage-hits-google-talk- 
hangouts/ 

For additional stories, see items 4 and 7 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

27. March 18, Dallas Business Journal - (National) AT&T experiences U-verse internet 
outage overnight. Several AT&T U-verse customers across southwestern States 
experienced an overnight Internet outage March 17-18. Officials stated that the outage 
occurred during a planned maintenance window and service for many customers was 
restored. 

Source: http://www.biziournals.com/dallas/blog/morning call/20 1 4/03/at-t-experience- 
u-verse-internet-outage-ovemight.html 

28. March 17, Kenai Peninsula Clarion - (Alaska) ACS outage affects Kenai Peninsula 
residents. Alaska Communications customers on the Kenai Peninsula south of Cooper 
Landing lost all wireless services for more than 5 hours March 17 due to equipment 
failure. 

Source: http://peninsulaclarion.com/news/2014-Q3-17/acs-outage-affects-kenai- 
peninsula-residents 
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Commercial Facilities Sector 



29. March 18, WRCB 3 Chattanooga - (Tennessee) Jaycee Towers repairs could take up 
to 3 days. About 150 residents were evacuated from the Jaycee Towers in Chattanooga 
after a fire started in a utility room March 17 and later knocked out power to the 
building. Repairs were expected to take several days. 

Source: http://www.wrcbtv.com/storv/24997617/iaycee-towers-evacuated-after- 
electric-fire 

30. March 18, Allentown Morning Call - (Pennsylvania) State finds Hickory Hills 
propane system violates regulations. Pennsylvania officials stated that the propane 
system serving the Hickory Hills Mobile Home Park in Moore Township was not 
properly registered with the State Public Utilities Commission, and inspectors found 18 
maintenance and operational violations within the system. An investigation was 
launched after a February 14 propane explosion at the mobile home park left one 
resident dead. 

Source: http://www.mcall.com/news/local/mc-moore-township-hickorv-hills-propane- 
violations-20 1 403 1 7,0,7782487 .story 

31. March 18, DNAinfo.com - (New York) Washington Heights building's gas service 
shut down after leak found. Con Edison shut off gas service to an apartment building 
in the Washington Heights area of New York City March 15 after residents reported a 
gas odor in the building. The utility will not restore service until all necessary repairs 
are made. 

Source: http://www.dnainfo.com/new-vork/20140318/washington-heights/washington- 
heights-buildings-gas-service-shut-down-after-gas-leak 

32. March 17, Kansas City Star - (Missouri) Gas leak, building evacuation illustrate 
challenges of KC streetcar project. About 500 people were evacuated from the 81 1 
Main building in downtown Kansas City for 2 hours March 17 after a Kansas City 
Power & Light contractor struck a gas line, causing a strong gas odor in the basement 
and stairwells of the building. Crews capped the gas line without disruption to service. 
Source: http://www.kansascity.com/2014/03/17/4896093/gas-leak-prompts-evacuation- 
of.html 

33. March 17, Northland’s NewsCenter - (Wisconsin) Thrift store damaged by fire. 
Officials believe a malfunctioning light fixture sparked a fire that engulfed the 
Northwoods Humane Society Thrift store in Hayward, Wisconsin, March 17. 

Source: http://www.northlandsnewscenter.com/news/nw-wisconsin/Thrift-store- 
damaged-by-fire-25068533 1 .html 

34. March 17, KHOU 11 Houston - (Texas) Suspicious package leads to evacuation of 
Premium Outlets in Cypress. The Houston Premium Outlets in Cypress were 
evacuated for about 2 hours March 17 after an employee reported a suspicious package 
sitting near a store. Authorities deemed the package was safe and cleared the scene. 
Source: http://www.kEou.com/news/local/font-color990000DEVELOPING-FQNT- 
Houston-Premium-Outlets-in-Cypress-evacuated-bomb-squad-in-the-scene- 
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250545971.html 



[ Return to top ] 



Dams Sector 



Nothing to report 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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